WeGIA Open Redirect Vulnerability in Control.php Endpoint

A moderate open redirect vulnerability has been identified in WeGIA versions 3.4.12 and prior. The issue resides in the control.php endpoint, specifically within the nextPage parameter. This vulnerability allows attackers to redirect users to arbitrary external domains, potentially leading to phishing attacks, distribution of malicious payloads, or theft of user credentials.

Impact

Exploitation of this vulnerability could result in users being redirected to malicious websites, increasing the risk of phishing attacks, credential theft, or exposure to malware.

Reproduction

To reproduce this vulnerability, send a GET request to the control.php endpoint with the nextPage parameter set to an external URL, such as https://google.com. The server will accept the request and redirect the user to the specified external site, bypassing any internal domain restrictions.

Remediation

Users are advised to update to WeGIA version 3.5.0, where this vulnerability has been fixed.